$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa File: d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa (raw, json) Hash identifier: rPTIayEpOlXP8JwvIEkF3k3w5hUnL0wSxFGCNJRQw6g= Subject key identifier: 3F:E0:FA:71:FE:DC:58:56:3C:09:13:84:9F:1F:B2:3E:DD:C0:D3:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7BA5A58F2D175292DB50 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 53271 IP address blocks: 209.192.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7b:a5:a5:8f:2d:17:52:92:db:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=267d68eb-6ab8-44de-938e-c3e3fe58bf92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0d:b4:99:a0:de:91:7a:9a:91:68:9e:30:dc: 03:57:24:0f:3e:1a:4a:a8:b9:72:2f:da:14:39:c8: 95:3e:30:2e:07:b4:b4:c5:85:d7:36:cf:64:10:57: 63:30:34:a5:69:4b:8e:90:0a:84:21:57:11:1e:2c: 69:4d:f4:cb:31:d5:6f:78:f1:46:12:19:05:07:8e: 27:7d:6c:8d:d2:74:cb:ad:34:ad:cf:e1:ea:c3:c3: ab:82:5b:f6:b7:03:38:d5:f1:41:f1:02:3f:28:a6: 2e:af:51:74:4a:5e:c9:3a:09:b0:44:27:3a:a1:52: b8:e6:e0:31:c3:a3:f5:29:35:e7:1b:f9:ad:27:8a: b0:a2:b7:31:a4:95:e6:97:ba:8a:33:85:3b:e3:8e: 3e:a4:c2:e1:cb:89:4e:c6:f5:e5:31:16:ba:82:cd: 6c:d4:47:5a:40:6c:ce:38:dc:f6:11:87:6c:6b:c9: 78:10:05:1c:8c:f5:10:bf:ea:84:0f:ad:50:53:52: 9b:f6:c9:a6:77:23:29:59:54:65:ac:46:d0:a6:0c: 27:73:1b:26:13:77:b1:2f:15:0c:92:77:03:71:84: 52:f3:28:94:d9:a9:7e:7e:06:bb:3a:06:b3:d3:ab: 71:81:52:07:9f:5d:35:78:a5:1b:84:80:28:50:86: f3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E0:FA:71:FE:DC:58:56:3C:09:13:84:9F:1F:B2:3E:DD:C0:D3:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a996d1-f97c-38d6-a1cf-7636b1160d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:04:cb:a5:4f:e5:c3:f8:ab:a2:bc:5c:77:f0:62:eb:e1:89: d7:e0:56:d8:e3:da:66:17:9b:55:7f:23:7a:4f:0f:de:ab:a4: 36:24:6e:69:a9:87:14:f4:87:07:94:87:64:42:4e:63:ee:2f: c0:d4:4b:b0:0a:bb:04:78:94:16:d9:f9:be:4e:81:30:ea:1c: 17:a2:7e:6e:61:58:26:24:b8:2d:49:8f:6a:b5:c6:1f:78:6f: 80:a6:2f:ec:f4:54:f4:ae:c0:e1:74:96:2b:c7:6b:36:20:13: 90:0a:3b:93:4c:ac:57:dd:c1:65:28:fb:9e:06:49:24:d3:41: 46:41:44:a1:f0:9c:4d:7b:b8:5d:29:78:76:e1:77:d3:01:dc: c2:aa:82:5e:d0:c7:be:c9:56:a4:d0:2b:f8:6d:df:f8:c2:24: d8:c5:f5:7d:e0:d4:89:a9:d5:c4:30:b5:7b:a0:76:21:09:33: e0:49:4c:fd:4b:63:3e:04:0e:8c:b3:66:db:6b:8d:6c:06:02: 7c:a8:16:bc:ae:dc:8e:27:68:26:5c:51:a1:c8:cb:3c:c2:40: 59:88:ee:0e:16:fb:88:0c:a5:07:d4:07:f8:2f:d5:fd:0a:72: da:72:25:9c:96:47:d2:7a:fa:b9:95:0d:1e:5b:82:e3:fd:b5: f9:76:8d:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnulpY8tF1KS21AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjY3ZDY4ZWItNmFiOC00NGRlLTkzOGUtYzNlM2ZlNThiZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A20maDekXqakWieMNwDVyQPPhpKqLlyL9oU OciVPjAuB7S0xYXXNs9kEFdjMDSlaUuOkAqEIVcRHixpTfTLMdVvePFGEhkFB44n fWyN0nTLrTStz+Hqw8Orglv2twM41fFB8QI/KKYur1F0Sl7JOgmwRCc6oVK45uAx w6P1KTXnG/mtJ4qworcxpJXml7qKM4U7444+pMLhy4lOxvXlMRa6gs1s1EdaQGzO ONz2EYdsa8l4EAUcjPUQv+qED61QU1Kb9smmdyMpWVRlrEbQpgwncxsmE3exLxUM kncDcYRS8yiU2al+fga7Ogaz06txgVIHn101eKUbhIAoUIbz4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/g+nH+3FhWPAkThJ8fsj7dwNMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFhOTk2ZDEtZjk3Yy0z OGQ2LWExY2YtNzYzNmIxMTYwZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cA7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsEy6VP5cP4q6K8XHfwYuvhidfgVtjj2mYXm1V/I3pPD96rpDYkbmmp hxT0hweUh2RCTmPuL8DUS7AKuwR4lBbZ+b5OgTDqHBeifm5hWCYkuC1Jj2q1xh94 b4CmL+z0VPSuwOF0livHazYgE5AKO5NMrFfdwWUo+54GSSTTQUZBRKHwnE17uF0p eHbhd9MB3MKqgl7Qx77JVqTQK/ht3/jCJNjF9X3g1Imp1cQwtXugdiEJM+BJTP1L Yz4EDoyzZttrjWwGAnyoFryu3I4naCZcUaHIyzzCQFmI7g4W+4gMpQfUB/gv1f0K ctpyJZyWR9J6+rmVDR5bguP9tfl2jS8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:42 2026 by rpki-client